Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f3/f06e79-ed2b-43d5-b4c1-abdf906c5ade/1/qVHmOKLLlcaLvFSicoYFsn9XBoE.mft
File: qVHmOKLLlcaLvFSicoYFsn9XBoE.mft (raw, json)
Hash identifier: ualLDB0t5o3lIGCSXaFu7Vx88gC5yeiNo5ZHIZuv9F4=
Subject key identifier: 96:4B:02:42:14:0C:95:03:1F:52:30:1D:3E:FB:AE:20:C3:19:49:C8
Authority key identifier: A9:51:E6:38:A2:CB:95:C6:8B:BC:54:A2:72:86:05:B2:7F:57:06:81
Certificate issuer: /CN=a951e638a2cb95c68bbc54a2728605b27f570681
Certificate serial: 0194C42C5A3CA2041C65DABC4BA427C1E9EA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qVHmOKLLlcaLvFSicoYFsn9XBoE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f3/f06e79-ed2b-43d5-b4c1-abdf906c5ade/1/qVHmOKLLlcaLvFSicoYFsn9XBoE.mft
Manifest number: 0AE5
Signing time: Sun 02 Feb 2025 01:00:28 +0000
Manifest this update: Sun 02 Feb 2025 01:00:28 +0000
Manifest next update: Mon 03 Feb 2025 01:00:28 +0000
Files and hashes: 1: HI_761EI5uyGqmjrDCQMeEJHGzc.roa (hash: QB8Dmgi2EHb5963iec21h5u6pDxN6G7ySEepAThURJA=)
2: qVHmOKLLlcaLvFSicoYFsn9XBoE.crl (hash: 3FBlO76bt3AAj3Lwq8OjoaV3xxdLxhvDReleY9H0hjg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f3/f06e79-ed2b-43d5-b4c1-abdf906c5ade/1/qVHmOKLLlcaLvFSicoYFsn9XBoE.crl
rsync://rpki.ripe.net/repository/DEFAULT/f3/f06e79-ed2b-43d5-b4c1-abdf906c5ade/1/qVHmOKLLlcaLvFSicoYFsn9XBoE.mft
rsync://rpki.ripe.net/repository/DEFAULT/qVHmOKLLlcaLvFSicoYFsn9XBoE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 03 Feb 2025 00:00:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:c4:2c:5a:3c:a2:04:1c:65:da:bc:4b:a4:27:c1:e9:ea
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a951e638a2cb95c68bbc54a2728605b27f570681
Validity
Not Before: Feb 2 01:00:28 2025 GMT
Not After : Feb 3 01:00:28 2025 GMT
Subject: CN=964b0242140c95031f52301d3efbae20c31949c8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:ca:7b:09:93:16:b1:f1:6d:17:4a:58:61:5f:
c4:4f:8c:e5:ef:89:82:df:d1:fc:20:97:ea:ea:19:
d2:68:48:1a:84:cc:35:70:45:21:24:9a:48:2c:2e:
0b:ac:19:b4:4f:9d:a2:ae:d5:96:ca:0e:68:cf:98:
88:55:62:92:25:98:85:1a:cc:d9:3b:f2:13:7f:d7:
0b:06:f0:b1:f8:14:70:d3:20:36:e9:96:ce:30:5a:
65:25:0c:87:91:dc:41:ba:fb:4d:e8:d8:9a:10:24:
76:95:c3:0d:c0:30:09:ff:78:8f:29:47:f4:85:7e:
ec:3a:ba:92:7d:88:77:17:dc:84:f1:a3:b6:fb:f9:
e7:27:79:e3:cc:29:ab:2b:6b:80:3b:e9:9f:37:8b:
7e:98:4f:c5:05:1a:5f:af:e0:b6:e0:01:26:e5:ce:
cf:d9:1c:a3:24:1a:f7:89:47:49:7f:d9:3c:55:2b:
ae:7c:4d:bc:9b:af:d7:e2:eb:94:92:b5:9d:0e:59:
24:94:8c:8a:c5:1a:18:a6:5d:62:10:33:ea:62:38:
05:ae:f6:a3:c2:65:5f:d4:39:23:da:d3:fa:42:67:
a8:c2:ff:60:c1:2d:b6:b1:c9:c2:c6:81:0e:8d:c8:
8a:35:62:81:0c:a4:d6:01:11:ef:1c:c6:f5:db:bd:
f5:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
96:4B:02:42:14:0C:95:03:1F:52:30:1D:3E:FB:AE:20:C3:19:49:C8
X509v3 Authority Key Identifier:
keyid:A9:51:E6:38:A2:CB:95:C6:8B:BC:54:A2:72:86:05:B2:7F:57:06:81
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qVHmOKLLlcaLvFSicoYFsn9XBoE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/f06e79-ed2b-43d5-b4c1-abdf906c5ade/1/qVHmOKLLlcaLvFSicoYFsn9XBoE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/f06e79-ed2b-43d5-b4c1-abdf906c5ade/1/qVHmOKLLlcaLvFSicoYFsn9XBoE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a3:5c:34:21:ed:64:0c:4c:88:b5:19:b7:c7:2f:85:95:17:3a:
c8:4a:b0:3f:93:7e:39:f1:b2:4a:2a:dd:82:71:e8:b8:26:b6:
d9:7e:9b:c8:d7:a7:fc:33:ef:8c:71:37:6f:d3:17:ef:71:65:
1a:81:82:5e:fe:9a:ae:6c:d6:51:2a:e6:85:3b:a1:90:b7:99:
71:ff:fc:3c:b5:28:ff:10:70:2e:98:ec:19:ea:a9:ef:49:55:
c2:52:c0:f7:00:88:3b:16:d4:72:06:b6:21:b6:f1:0a:1a:b6:
df:eb:7f:b2:97:2f:2e:5d:7e:a3:07:02:e7:77:1e:ba:be:5c:
19:1b:3a:56:dd:7b:36:1b:59:43:f1:8f:27:77:2f:4a:55:a3:
06:5d:b8:a3:98:41:7c:65:6e:2c:09:75:0b:02:d9:f0:60:d1:
43:40:c7:25:44:ae:57:85:fc:72:2e:cb:8d:4d:df:0e:07:3f:
78:7c:55:15:ac:0f:f2:cc:c8:94:cd:8d:e5:5f:71:9e:56:fd:
42:29:66:5c:1f:dc:29:0f:4a:6e:f6:8b:33:e9:4f:a2:03:4e:
e4:5e:7a:60:76:1f:6c:f9:71:92:f3:a6:0e:51:44:a2:a1:2f:
85:8d:7f:60:e0:9f:86:84:a3:d6:b3:97:ef:25:d1:59:b9:8e:
51:20:8c:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 2 05:52:45 2025 by rpki-client